CVE

Id
42000  
CVE No.
CVE-2009-4565  
Status
Candidate  
Description
sendmail before 8.14.4 does not properly handle a "" character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and (2) allows remote attackers to bypass intended access restrictions via a crafted client certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.  
Phase
Assigned (20100104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
460205 42000 CVE-2009-4565 CONFIRM:http://www.sendmail.org/releases/8.14.4  View
460206 42000 CVE-2009-4565 DEBIAN:DSA-1985  View
460207 42000 CVE-2009-4565 URL:http://www.debian.org/security/2010/dsa-1985  View
460208 42000 CVE-2009-4565 GENTOO:GLSA-201206-30  View
460209 42000 CVE-2009-4565 URL:http://security.gentoo.org/glsa/glsa-201206-30.xml  View
460210 42000 CVE-2009-4565 HP:HPSBUX02508  View
460211 42000 CVE-2009-4565 URL:http://marc.info/?l=bugtraq&m=126953289726317&w=2  View
460212 42000 CVE-2009-4565 HP:SSRT100007  View
460213 42000 CVE-2009-4565 URL:http://marc.info/?l=bugtraq&m=126953289726317&w=2  View
460214 42000 CVE-2009-4565 REDHAT:RHSA-2011:0262  View
460215 42000 CVE-2009-4565 URL:http://www.redhat.com/support/errata/RHSA-2011-0262.html  View
460216 42000 CVE-2009-4565 SUNALERT:1021797  View
460217 42000 CVE-2009-4565 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021797.1-1  View
460218 42000 CVE-2009-4565 SUSE:SUSE-SR:2010:006  View
460219 42000 CVE-2009-4565 URL:http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html  View
460220 42000 CVE-2009-4565 BID:37543  View
460221 42000 CVE-2009-4565 URL:http://www.securityfocus.com/bid/37543  View
460222 42000 CVE-2009-4565 OVAL:oval:org.mitre.oval:def:10255  View
460223 42000 CVE-2009-4565 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10255  View
460224 42000 CVE-2009-4565 OVAL:oval:org.mitre.oval:def:11822  View
460225 42000 CVE-2009-4565 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11822  View
460226 42000 CVE-2009-4565 SECUNIA:37998  View
460227 42000 CVE-2009-4565 URL:http://secunia.com/advisories/37998  View
460228 42000 CVE-2009-4565 SECUNIA:38314  View
460229 42000 CVE-2009-4565 URL:http://secunia.com/advisories/38314  View
460230 42000 CVE-2009-4565 SECUNIA:38915  View
460231 42000 CVE-2009-4565 URL:http://secunia.com/advisories/38915  View
460232 42000 CVE-2009-4565 SECUNIA:39088  View
460233 42000 CVE-2009-4565 URL:http://secunia.com/advisories/39088  View
460234 42000 CVE-2009-4565 SECUNIA:40109  View
460235 42000 CVE-2009-4565 URL:http://secunia.com/advisories/40109  View
460236 42000 CVE-2009-4565 SECUNIA:43366  View
460237 42000 CVE-2009-4565 URL:http://secunia.com/advisories/43366  View
460238 42000 CVE-2009-4565 VUPEN:ADV-2009-3661  View
460239 42000 CVE-2009-4565 URL:http://www.vupen.com/english/advisories/2009/3661  View
460240 42000 CVE-2009-4565 VUPEN:ADV-2010-1386  View
460241 42000 CVE-2009-4565 URL:http://www.vupen.com/english/advisories/2010/1386  View
460242 42000 CVE-2009-4565 VUPEN:ADV-2010-0719  View
460243 42000 CVE-2009-4565 URL:http://www.vupen.com/english/advisories/2010/0719  View
460244 42000 CVE-2009-4565 VUPEN:ADV-2011-0415  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37853 JVNDB-2010-003638 elkagroup Image Gallery における SQL インジェクションの脆弱性 elkagroup Image Gallery には、SQL インジェクションの脆弱性が存在します。 CVE-2009-4569 42000 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003638.html  View